Koozali.org: home of the SME Server

Rebuild php - How to

CopagJoe

Rebuild php - How to
« on: February 11, 2006, 05:12:56 AM »
Somebody caused a rebuild of php on my server this afternoon.
1 - How do I restore/rebuild php?
2 - How do I prevent this?

Please Help!! My site is down.

Offline pfloor

  • *****
  • 889
  • +1/-0
Re: Rebuild php - How to
« Reply #1 on: February 11, 2006, 10:09:56 AM »
Quote from: "CopagJoe"
Somebody caused a rebuild of php on my server this afternoon.
1 - How do I restore/rebuild php?
2 - How do I prevent this?

Please Help!! My site is down.


What exactly do you mean here?  What did they rebuild?  Your website still works but its kind of slow.  

Your server was compramized due to the CRE Loaded 6.15/OScommerce website that you run.  Did you bother to read any of this: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-0478 ? There is a patch available but I'm sure it's too late now.

You will probably need to remove all the PHP scripting and start from scratch with a re-load of your site.  No telling what the attacker erased, changed or added to you site.

P.S. You can't prevent it if you don't keep your machine patched, especially badly written PHP scripts.
In life, you must either "Push, Pull or Get out of the way!"